Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 30, 2025

Bumps github.com/cloudposse/atmos from 1.189.0 to 1.196.0.

Release notes

Sourced from github.com/cloudposse/atmos's releases.

v1.196.0

what

  • Add Google Cloud Storage (GCS) backend support to !terraform.state Atmos YAML function
  • Implement performance optimizations (client caching, retry logic, extended timeouts)
  • Create unified Google Cloud authentication system for consistency across GCP services
  • Update documentation with GCS backend usage examples and authentication methods

why

The !terraform.state YAML function allows reading the outputs (remote state) of components in Atmos stack manifests directly from the configured Terraform/OpenTofu backends.

Previously, the !terraform.state YAML function only supported:

  • local (Terraform and OpenTofu)
  • s3 (Terraform and OpenTofu)

This PR adds support for:

  • gcs (Google Cloud Storage - Terraform and OpenTofu)

With GCS backend support, users can now leverage the high-performance !terraform.state function instead of the slower !terraform.output or !store functions when using Google Cloud Storage for Terraform state storage.

Implementation Details

GCS Backend Features

  • Full Authentication Support: JSON credentials, service account file paths, and Google Application Default Credentials (ADC)
  • Service Account Impersonation: Support for impersonate_service_account configuration
  • Performance Optimizations:
    • Client caching to avoid recreating GCS clients for repeated operations
    • Retry logic with exponential backoff (up to 3 attempts) for transient failures
    • Extended timeouts (30 seconds) to match S3 backend performance
  • Robust Error Handling: Graceful handling of missing state files and detailed error context
  • Resource Management: Proper cleanup and explicit resource management

Usage

The GCS backend works seamlessly with existing !terraform.state syntax:

# Get the `output` of the `component` in the current stack
subnet_id: !terraform.state vpc private_subnet_id
Get the output of the component in the provided stack
vpc_id: !terraform.state vpc dev-us-east-1 vpc_id
Get complex outputs using YQ expressions
first_subnet: !terraform.state vpc .private_subnet_ids[0]
</tr></table>

... (truncated)

Commits
  • c6dbdaf chore: Update Pro Instances API (#1721)
  • f9bcb1f fix: Consolidate credential retrieval logic to fix terraform auth (#1720)
  • b1068c1 Support !terraform.state on GCS Backends (#1393)
  • 1eda3a2 fix: Improve AWS credential isolation and auth error propagation (#1712)
  • d99ad68 fix: Restore PATH inheritance in workflow shell commands (#1719)
  • 7cfd2f2 fix: Relax stack config requirement for commands that don't operate on stacks...
  • 1bc8f40 Change runner type in nightly builds workflow (#1713)
  • 5059569 Update nightlybuilds.yml (#1711)
  • 4399ce8 Fix Terraform state authentication by passing auth context (#1695)
  • 35e2af6 Add circular dependency detection for YAML functions (#1708)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [github.com/cloudposse/atmos](https://github.com/cloudposse/atmos) from 1.189.0 to 1.196.0.
- [Release notes](https://github.com/cloudposse/atmos/releases)
- [Changelog](https://github.com/cloudposse/atmos/blob/main/.goreleaser.yml)
- [Commits](cloudposse/atmos@v1.189.0...v1.196.0)

---
updated-dependencies:
- dependency-name: github.com/cloudposse/atmos
  dependency-version: 1.196.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code minor New features that do not break anything labels Oct 30, 2025
@dependabot dependabot bot requested review from a team as code owners October 30, 2025 07:02
@dependabot dependabot bot added the go Pull requests that update Go code label Oct 30, 2025
@dependabot dependabot bot requested review from kevcube and oycyc October 30, 2025 07:02
@coderabbitai
Copy link

coderabbitai bot commented Oct 30, 2025

Important

Review skipped

Ignore keyword(s) in the title.

⛔ Ignored keywords (3)
  • Bump
  • chore(deps)
  • WIP

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@mergify mergify bot added the auto-update This PR was automatically generated label Oct 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-update This PR was automatically generated dependencies Pull requests that update a dependency file go Pull requests that update Go code minor New features that do not break anything

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant